Hi all, we found a privilege issues and don't know whether it is

eaglez over 10 years ago

Hi all,

we found a privilege issues and don't know whether it is a expected behavior.
user in Group B can also accept the tempo task even if it is assigned to Group A, as long as he knows the task link.

Discussion posts and replies are publicly visible

Parents

0 Chris over 10 years ago

Note this may also be able to happen if the user has Manager permissions to the process model. In that scenario the user can access tasks assigned to other users (it is not listed in the documentation but should be AN-401222)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Chris over 10 years ago

Note this may also be able to happen if the user has Manager permissions to the process model. In that scenario the user can access tasks assigned to other users (it is not listed in the documentation but should be AN-401222)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data